Republic of Korea: Personal Information Protection Commission investigation into Coupang over data leak of customer and account information
Progress
Current status
under investigation
03 Dec 2025 under investigation
30 Nov 2025 under deliberation
Scope
Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
platform intermediary: e-commerce
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Personal Information Protection Commission required Coupang to implement corrective notification, public disclosure, and strengthened mitigation measures following investigation into data leak
On 3 December 2025, the Personal Information Protection Commission (PIPC) convened an emergency full Commission meeting and required Coupang to implement corrective notification, public disclosure, and strengthened mitigation measures following its …
SourceEvent type
investigation
Action type
interim ruling
Government branch
executive
Government body
data protection authority
Personal Information Protection Commission announced investigation into Coupang over data leak of customer and account information
On 30 November 2025, the Personal Information Protection Commission (PIPC) announced an investigation into Coupang, an e-commerce platform, over a data leak of customer and account information. The PIPC first received notice of data leaks on 20 Nove…
SourceEvent type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority